Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/L-UN-M5Q22bCS0C4Nqifh87jtEk.roa
File:                     L-UN-M5Q22bCS0C4Nqifh87jtEk.roa (raw, json)
Hash identifier:          JTrX3l4A8MyWR5a53XiHgfCeCNk2Jf/aJIttsHxQfW0=
Subject key identifier:   2F:E5:0D:F8:CE:50:DB:66:C2:4B:40:B8:36:A8:9F:87:CE:E3:B4:49
Certificate issuer:       /CN=51ea07606b286288cedfd25fee8f8b76e416d7fd
Certificate serial:       F1BC8F
Authority key identifier: 51:EA:07:60:6B:28:62:88:CE:DF:D2:5F:EE:8F:8B:76:E4:16:D7:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeoHYGsoYojO39Jf7o-LduQW1_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/L-UN-M5Q22bCS0C4Nqifh87jtEk.roa
Signing time:             Sat 01 Jan 2022 11:58:20 +0000
ROA not before:           Sat 01 Jan 2022 11:58:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        193.3.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15842447 (0xf1bc8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ea07606b286288cedfd25fee8f8b76e416d7fd
        Validity
            Not Before: Jan  1 11:58:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2fe50df8ce50db66c24b40b836a89f87cee3b449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:26:22:b5:0a:b9:99:34:7b:69:53:95:ff:dc:
                    4e:83:04:19:7a:48:8a:12:66:b7:2c:cd:27:30:ad:
                    97:39:7e:45:21:4d:bd:96:f5:68:86:1f:01:89:77:
                    e8:d3:eb:24:0e:16:a6:e6:cd:ca:66:f1:af:b9:bd:
                    92:d4:ab:86:c0:13:1f:e5:8b:cb:69:13:14:7a:09:
                    87:00:57:51:39:ec:3b:3f:82:19:f7:83:ea:ee:0c:
                    a2:ca:02:6b:c6:92:31:e3:41:15:17:90:2b:12:f6:
                    5f:ea:38:c1:34:60:b3:19:55:0f:60:96:2d:78:76:
                    dd:d4:5f:62:17:41:7b:43:0c:55:cf:00:37:58:81:
                    a5:d4:ac:6a:f7:53:70:db:b2:51:a6:52:69:cd:10:
                    29:29:2c:43:80:97:a0:e3:4a:58:c5:4c:93:e6:ff:
                    07:ff:24:e0:60:9e:36:5e:97:2b:bf:75:d2:79:5b:
                    7d:f7:c1:4f:c1:d8:94:ca:1b:7d:a8:78:53:54:20:
                    b5:7b:ad:cc:c4:e1:64:3f:55:e3:6e:7d:54:85:8a:
                    8f:86:fe:3d:dc:6e:4d:cb:bf:a8:4f:9c:e2:97:23:
                    bf:e7:73:09:1c:70:52:b0:a6:79:b1:1a:0d:c7:8a:
                    49:eb:3a:04:2c:55:c8:79:e0:2a:7e:2a:83:b7:aa:
                    2e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E5:0D:F8:CE:50:DB:66:C2:4B:40:B8:36:A8:9F:87:CE:E3:B4:49
            X509v3 Authority Key Identifier:
                keyid:51:EA:07:60:6B:28:62:88:CE:DF:D2:5F:EE:8F:8B:76:E4:16:D7:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeoHYGsoYojO39Jf7o-LduQW1_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/L-UN-M5Q22bCS0C4Nqifh87jtEk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/UeoHYGsoYojO39Jf7o-LduQW1_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:87:7f:45:6b:87:7b:0c:c3:d5:9a:37:86:f4:a0:e1:b7:00:
         ce:e9:a3:71:d8:e7:77:24:05:b4:29:1d:ad:cc:60:d9:17:2e:
         76:9e:72:82:6d:75:42:7e:4d:a7:fc:17:e6:2c:61:f8:56:a4:
         8f:96:ac:87:e1:88:11:a1:55:fa:c8:34:c2:0f:23:f5:0e:76:
         4c:80:f4:2c:95:55:c3:79:78:c0:f2:89:e9:22:bb:88:ed:0a:
         f8:07:68:85:03:91:49:73:13:3f:3d:01:d5:48:dc:5c:a0:3a:
         65:79:5a:af:b0:c4:a2:ee:05:e9:cb:64:5e:bb:8d:97:9e:e6:
         79:da:c2:52:ad:9f:85:71:64:2b:d0:54:0e:ae:d1:37:3f:0c:
         e9:ef:db:bd:ec:d2:01:10:4e:08:f1:58:cb:b0:9f:8c:c8:01:
         90:fc:9f:a5:5f:09:fb:87:6d:e6:65:a6:8f:8b:bc:a2:a7:b3:
         6f:d9:17:f9:56:fe:a3:5b:d4:cc:25:75:df:74:a0:0c:a2:5a:
         cb:ac:4f:13:cb:13:6e:c2:3b:8a:d4:33:73:61:d2:92:70:14:
         76:71:82:9a:98:e3:ef:eb:b3:29:3d:b4:09:89:e1:9e:b9:dd:
         7b:70:54:6b:74:e3:f6:1a:65:cb:90:5e:d3:47:09:8e:7d:61:
         0e:f7:1e:e4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAPG8jzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MWVhMDc2MDZiMjg2Mjg4Y2VkZmQyNWZlZThmOGI3NmU0MTZkN2ZkMB4XDTIyMDEw
MTExNTgyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmZlNTBkZjhjZTUw
ZGI2NmMyNGI0MGI4MzZhODlmODdjZWUzYjQ0OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI8mIrUKuZk0e2lTlf/cToMEGXpIihJmtyzNJzCtlzl+RSFN
vZb1aIYfAYl36NPrJA4WpubNymbxr7m9ktSrhsATH+WLy2kTFHoJhwBXUTnsOz+C
GfeD6u4MosoCa8aSMeNBFReQKxL2X+o4wTRgsxlVD2CWLXh23dRfYhdBe0MMVc8A
N1iBpdSsavdTcNuyUaZSac0QKSksQ4CXoONKWMVMk+b/B/8k4GCeNl6XK7910nlb
fffBT8HYlMobfah4U1QgtXutzMThZD9V4259VIWKj4b+PdxuTcu/qE+c4pcjv+dz
CRxwUrCmebEaDceKSes6BCxVyHngKn4qg7eqLr0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQv5Q34zlDbZsJLQLg2qJ+HzuO0STAfBgNVHSMEGDAWgBRR6gdgayhiiM7f
0l/uj4t25BbX/TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Vlb0hZR3NvWW9qTzM5SmY3by1MZHVRVzFfMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjMvZjNlMGYyLTBiYjYtNDk1Yi1hZDNhLTZjM2Y2OWIxODczNS8x
L0wtVU4tTTVRMjJiQ1MwQzROcWlmaDg3anRFay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMv
ZjNlMGYyLTBiYjYtNDk1Yi1hZDNhLTZjM2Y2OWIxODczNS8xL1Vlb0hZR3NvWW9q
TzM5SmY3by1MZHVRVzFfMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEDFDANBgkqhkiG9w0BAQsFAAOC
AQEAI4d/RWuHewzD1Zo3hvSg4bcAzumjcdjndyQFtCkdrcxg2Rcudp5ygm11Qn5N
p/wX5ixh+Fakj5ash+GIEaFV+sg0wg8j9Q52TID0LJVVw3l4wPKJ6SK7iO0K+Ado
hQORSXMTPz0B1UjcXKA6ZXlar7DEou4F6ctkXruNl57medrCUq2fhXFkK9BUDq7R
Nz8M6e/bvezSARBOCPFYy7CfjMgBkPyfpV8J+4dt5mWmj4u8oqezb9kX+Vb+o1vU
zCV133SgDKJay6xPE8sTbsI7itQzc2HSknAUdnGCmpjj7+uzKT20CYnhnrnde3BU
a3Tj9hply5Be00cJjn1hDvce5A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:42 2024 by rpki-client on console-ams.rpki-client.org